Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: 7iXmbQ6HxKm5tJrehmc6RLvfeUsqklOxRjFSoIgrIDY=
Subject key identifier: A3:BE:9B:17:44:D5:60:70:FA:D6:0D:EC:CE:B6:4D:8F:4B:A3:42:DA
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 019921E74BC644FCB5D96085F95EF3066FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 0942
Signing time: Sun 07 Sep 2025 02:00:30 +0000
Manifest this update: Sun 07 Sep 2025 02:00:30 +0000
Manifest next update: Mon 08 Sep 2025 02:00:30 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: 2+LGvlWo6W5/9JdIZTBWzuSQecp80l3Awkczv7aqmPg=)
2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:4b:c6:44:fc:b5:d9:60:85:f9:5e:f3:06:6f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Sep 7 02:00:30 2025 GMT
Not After : Sep 8 02:00:30 2025 GMT
Subject: CN=a3be9b1744d56070fad60decceb64d8f4ba342da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:5c:74:72:35:71:76:1c:1f:c6:91:ad:12:
a7:83:d7:b5:91:8d:f9:d5:e2:79:31:16:a2:1a:90:
76:94:a1:4d:e7:70:a1:51:e0:cf:9e:5f:ac:1b:85:
b6:8f:c8:f6:77:01:a3:03:d2:ea:de:05:39:94:66:
0c:2b:63:9a:f5:1f:02:6c:d8:f5:10:06:f0:7a:d1:
91:a4:e4:d4:98:13:ca:cd:3d:4a:51:42:33:9e:02:
84:e5:86:3d:d0:0c:5e:fa:cf:1d:f5:be:98:36:76:
53:59:70:83:48:16:5d:3a:ba:20:eb:9d:b8:28:1b:
09:d2:95:f5:4a:9f:9d:9d:7f:85:71:0f:ec:70:7f:
ef:cb:3e:d0:01:9c:b5:f7:e2:13:d2:0d:39:87:70:
18:b0:53:a7:8b:00:9e:f8:18:52:41:c7:c4:29:81:
8e:6e:81:96:14:ad:f9:24:bf:dc:93:67:65:b1:48:
3d:75:f5:9a:e9:73:55:e3:89:05:54:6f:c7:68:a3:
3f:f2:ae:94:61:ec:a1:ba:cc:d8:11:56:af:c4:b7:
02:58:7f:49:da:68:6c:d2:54:9a:b0:cd:e4:d0:ab:
eb:2c:10:52:5f:6c:5e:e2:0c:fa:83:b1:95:55:3e:
c7:81:cd:b6:ea:32:a7:98:ec:de:2c:2c:a1:50:8e:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BE:9B:17:44:D5:60:70:FA:D6:0D:EC:CE:B6:4D:8F:4B:A3:42:DA
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:72:e2:92:9a:18:1a:58:76:34:a3:37:33:fb:a3:c1:a3:
98:35:bb:b2:3b:61:37:69:d7:bf:a9:45:8e:80:38:ad:20:8f:
c2:44:b8:e8:60:aa:2c:b7:9c:c1:67:55:f1:ca:ac:28:58:a0:
12:cb:37:c1:93:71:78:a8:0a:a1:8b:29:d5:ee:e6:99:9e:dc:
b6:06:c3:ac:4d:1e:bd:aa:06:51:8a:d4:ac:83:1c:56:9e:e7:
39:0b:af:fe:dc:91:49:e4:03:99:56:72:e6:d8:99:ce:73:00:
4c:74:5b:f5:48:b3:36:b9:44:08:54:71:4d:e7:a3:d2:1a:a1:
81:5e:a6:9c:b3:25:c4:65:ed:b4:03:ca:2b:bf:37:89:d3:69:
40:62:08:8d:d5:51:fa:9e:46:e0:ed:b1:a4:df:f7:1b:74:66:
54:91:1d:1d:8a:70:25:e0:83:fa:8d:c0:3c:46:18:79:52:03:
fe:17:6f:09:fd:b0:20:3f:53:9c:43:08:59:5c:f9:c1:b8:0a:
d9:1f:79:f1:4a:f7:c7:ca:43:60:93:42:90:17:ed:42:49:f6:
ac:b8:7c:bc:3f:d9:7e:8b:7e:ab:8c:36:8b:ce:4a:b4:7c:cc:
2a:4a:dd:4e:db:8d:4c:28:5f:cd:b2:fe:a0:a5:4f:1a:65:87:
7e:3e:7a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:56 2025 by rpki-client